Data retention policy

Last updated: June 25, 2026

Sestaro applies the storage-limitation principle (GDPR art. 5(1)(e)): personal data is kept only as long as necessary. Below is how long each category is retained.

Prospecting data (B2B contacts in the index)

Kept while it serves the service and refreshed at each re-ingestion. Erasable at any time on request (right to erasure) or via opt-out; a removed person is added to a suppression list so they are never re-introduced.

Contacts revealed by a client

Kept in the client's history while their account is active, so they never pay twice. Anonymised if the person exercises their right to erasure.

Account data (name, email)

Until the client deletes their account (right to erasure).

Admin audit logs

365 days.

Email verification cache

90 days.

Search logs

180 days.

Billing data (invoices, payments)

Kept 10 years (legal accounting obligation, art. L123-22 French Commercial Code).

How it is enforced

An automated weekly purge deletes data beyond these windows. Billing data and accounts are never touched by this purge.

Remove my data